Privacy Policy

euro-train.eu is committed to protecting the privacy of its users. This privacy policy explains how we collect, use and protect your personal data.

11. Data Controller

The data controller is [Company Name], located at [Full Address]. For any questions regarding your personal data, contact us at privacy@euro-train.eu.

22. Data Collected

We collect the following data:

• Identification data : name, first name, email, phone
• Travel data : dates, destinations, preferences
• Payment data : processed securely by Stripe
• Navigation data : IP address, cookies, pages visited

33. Processing Purposes

Your data is used to:

• Process your booking requests
• Contact you regarding your trip
• Improve our services
• Comply with our legal obligations
• Send you marketing communications (with your consent)

44. Legal Basis for Processing

The processing of your data is based on:

• Contract execution : to process your reservations
• Your consent : for marketing communications
• Legitimate interest : to improve our services
• Legal obligation : for billing and accounting

55. Retention Period

Your data is retained for:

• Booking data : 5 years after the last transaction
• Accounting data : 10 years (legal requirement)
• Marketing data : 3 years after last contact
• Cookies : maximum 13 months

66. Data Sharing

Your data may be shared with:

• Railway operators : to make reservations
• Stripe : for secure payment processing
• Hosting provider : for secure data storage

We never sell your personal data to third parties.

77. Your Rights

In accordance with GDPR, you have the following rights:

• Right of access : obtain a copy of your data
• Right of rectification : correct your inaccurate data
• Right to erasure : delete your data
• Right to data portability : receive your data in a structured format
• Right to object : refuse the processing of your data
• Right to withdraw consent : withdraw your consent at any time

To exercise these rights, contact us at privacy@euro-train.eu.

88. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, modification, disclosure or destruction:

• SSL/TLS encryption for all communications
• Secure payments via Stripe (PCI-DSS certified)
• Restricted access to personal data
• Regular and secure backups

99. Cookies

Our site uses cookies to improve your experience. For more information, please see our cookie policy.

1010. Complaint

If you believe your rights are not being respected, you can file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr